Skip to content

PowerShell program to guess the BitLocker key for a Bit Locked drive.

License

Notifications You must be signed in to change notification settings

DiadNetworks/BitLocker-Key-Guesser

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

24 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

BitLocker-Key-Guesser

PowerShell script to guess the BitLocker key for a Bit Locked drive.

Running the Program

Powershell 7 or higher is required to be installed on your system.
Allow scripts to be run from powershell 7. Or unblock the specific script files, see below.
Download the latest zip file.
Run BitGuesser.bat, preferably as an administrator.
Refer to the controls section below for an explanation of the GUI controls.

Controls

Local Image

Bit Locked Drive Letter: Use this dropdown to select the bit locked drive that you want to guess the key for.

Refresh Drives: Use this button to refresh the list of drives. Use this if you ran the program before plugging in the bit locked drive.

Parallel Guesses: This determines how many guesses the script will make in parallel. The value is prefilled with the number of cores in your system. You can experiment with making this 2, 3, 4 or 5 times the default, but be careful of going too high or the program may crash.

Mode: Here you can choose whether to attempt random guesses or to generate keys in order.

Advanced: You can select whether the program should wait for confirmation whether the guessed key was successful or not. If you select "Don't Confirm", the program won't know if it guessed the correct key and will continue to guess even if the drive has been unlocked. This will, however, speed up the guessing drastically.

Optimize Settings for Speed: Clicking this button sets the program's settings for best speed.

Info Window: For future use.

Start: Click this when you're ready to start guessing the key. It will start the process using the drive letter that you specified. A powershell window will open up showing info.

Stop: Click this if you want to close the running process. This will only work if you ran BitGuesser.bat as an administrator, otherwise you will need to close out the powershell window manually.

Progress Bar: Just for show.

Unblock only the necessary script files:

If you prefer not to change your script execution policy, you can unblock just the files you need to by opening a Powershell 7 terminal in the Scripts folder and typing this command: Unblock-File *.

What happens if it guesses correctly?

If one of the processes guesses the correct key, it will unlock the drive and output the key to SuccessfulKey.txt in the Scripts folder.

Note: The program won't permanently decrypt the drive, so make sure you go to control panel and do that if that's what you want. If you plan on leaving the drive encrypted, then save the key from SuccessfulKey.txt.